Log management

Logs

Indexing every field is why log platforms cost more than the infrastructure they watch. Northwind indexes metadata and scans the rest, quickly.

Two cost bars. An index-everything platform spends 72% of cost on the index; Northwind spends 14%, indexing metadata only and scanning bodies from compressed columns. WHERE THE COST GOES Index-everything index storage Northwind index storage Metadata is indexed; bodies are scanned from compressed columns

Index metadata, scan the body

Service, host, level and trace ID are indexed. Message bodies are scanned from columnar storage, which is fast enough that the difference does not show.

One query language

The same NWQL expression filters logs, traces and metrics. You stop translating between three dialects during an incident.

Live tail that survives volume

Streaming tail with server-side filtering, so a noisy deploy does not turn the console into a firehose you have to close.

Specification

The numbers that matter.

Published rather than discovered during a proof of concept.

StorageColumnar, compressed ~11:1
Indexed fieldsMetadata only
Live tail latencyUnder 2 seconds
Max line length256 KB

Also on the platform

The other two signals.

Time series

Metrics

Ten-second resolution, kept at full fidelity for as long as you pay to keep it.

Distributed tracing

Traces

Tail-based sampling that keeps the traces you actually needed.

See logs on your own data.

Book a demo See pricing